Conference Tracks - Governance, Risk and Compliance

Track Description
Increasing regulatory oversight in the wake of corporate scandals and compliance and privacy breaches has led organizations to define clear constraints under which they can operate. This area of concern is called Governance, Risk and Compliance (GRC). The importance of governance, and associated issues of compliance and risk management, is well recognized in enterprise systems. The GRC market now stands estimated at over US$32 billion. Tool support for GRC is provided by over 100 software vendors, however, while the tools have on average tripled in price since 2003, they are often insufficient to meet organizational needs. It is inevitable that organizations will need to develop methods, tools and techniques to design, engineer, and assess systems and processes that meet regulatory, standard and contractual obligations. This area is emerging as a critical and challenging topic for research and innovation. In Information Systems in particular, it introduces, among others, the need for new or adapted modeling approaches for compliance requirements, extension of process and service modeling, frameworks for compliance and risk management, detection of policy violations, and design of compliance-checking systems.

Relevant Topics
The track encourages submissions using a variety of research methodologies. The submissions of interest are expected to cover the following topics, as they relate to GRC, however other high quality submissions in related areas may also be considered:

• Organizational culture
• Visualization and simulation of risks
• Process governance
• Work tracking
• Violation detection
• Technologies for compliance assurance
• Decision tracing
• Organizational structures to support compliance
• Compliant service and process design
• Governance and compliance processes
• Process governance
• Applications, case studies and use cases
• Action research and best practice approaches

Confirmed journal special issues and/or journal fast-track
Authors of selected best papers from the track will be invited to submit an extended version of the paper to the Information Systems special issue on Governance, Risk and Compliance in Information Systems.

Confirmed Associate Editors
Shazia Sadiq, The University of Queensland, Australia
Guido Governatori, NICTA, Australia
Jan Vanthienen, Katholieke Universiteit Leuven, Belgium
Andreas Schaad, SAP Research, Germany
Regine Leleau, Universite Paris-Est Creteil, France

Track Chairs
Marta Indulska, The University of Queensland, Australia
Michael zur Muehlen, Stevens Institute of Technology, USA
Jude Fernandez, SET Labs, Infosys Technologies Limited, India

Contact details
m.indulska@business.uq.edu.au